> ## Content Index
> Fetch the complete content index at: https://stackurity.dev/blog/llms.txt
> Use this file to discover other available public pages before exploring further.

# Ubuntu patches five nginx vulnerabilities in USN-8955-1
- URL: https://stackurity.dev/blog/nginx-usn-8955-1-five-vulnerabilities/
- Published: 2026-10-28T08:35:04.000Z
- Updated: 2026-10-28T12:36:09.000Z
- Description: Ubuntu notice USN-8955-1 fixes five nginx flaws, including crashes, possible code execution and forged client sessions. See how to check.
- Author: Stackurity Research Team
- Tags: Web Servers and Databases, News

**TL;DR:** Ubuntu has published notice USN-8955-1 covering five nginx vulnerabilities, from crashes to possible code execution and forged client sessions. Apply the updated nginx package from your distribution.

## What happened

The [Ubuntu Security Notices feed](https://ubuntu.com/security/notices/USN-8955-1) lists five nginx issues in one notice. In short, they are:

- CVE-2026-15176: a crash or possible code execution when an alias directive is combined with rewrite rules.
- CVE-2026-93479: the same kind of outcome with map directives that use regex matching.
- CVE-2026-95101: data injection into proxied requests when HTTP/3 is used with request buffering turned on, limited to some Ubuntu releases.
- CVE-2026-97205: a crash or possible code execution with asynchronous file I/O and Server Side Includes pages.
- CVE-2026-97629: forged client SSL sessions, which can bypass client certificate checks, when a shared session cache is used without explicit ticket key rotation.

Whether you are exposed depends on your configuration, since each issue needs a particular feature to be in use. The fixed nginx packages are 1.18.0-6ubuntu14.22 on Ubuntu 22.04 LTS, 1.24.0-2ubuntu7.19 on 24.04 LTS, 1.28.3-2ubuntu1.12 on 26.04 LTS and 1.30.4-7ubuntu1.1 on 26.10.

## Am I affected?

Run `nginx -V` and `dpkg -l nginx`, then compare the installed package with the one listed in the Ubuntu notice. Review your configuration for the features above. Other distributions may ship their own fixes under their own version numbers.

## How to check with Stackurity

Stackurity keeps one inventory of the packages on your Linux servers and container images and matches it every hour against vendor advisories and other vulnerability data, using each ecosystem's own version rules. It then lists the package upgrade that clears the issues and checks again afterwards to record whether it worked. [Start the free trial](https://app.stackurity.dev/signup?utm%5Fsource=blog&utm%5Fmedium=referral&utm%5Fcampaign=web-servers-databases&utm%5Fcontent=nginx-usn-8955-1-five-vulnerabilities) to see which of your servers still run an unpatched nginx.

Related: [two exploited PHP flaws in CISA's catalogue](https://stackurity.dev/blog/php-cisa-kev-cve-2026-109618-cve-2026-109619/). Stackurity reads Ubuntu's own fixed versions, so a patched package is not reported; see [supported systems](https://stackurity.dev/docs/compatibility).